CVE-2018-21117

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2020-04-22

Last modified

2024-08-05

Affected products

• Xr500 Firmware (Netgear)

References

• https://kb.netgear.com/000060241/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-XR500-PSV-2018-0313